Roles & responsibilities

- Perform manual application penetration tests on one or more of the following to discover and exploit vulnerabilities: web applications, internal applications, APIs,

internal and external networks, and mobile applications

- Plan and execute network penetration testing and Red teaming assessments to simulate real-world attack scenarios.
- Perform manual network and application penetration tests on internal network,

Active Directory environment, web applications.

- Perform social engineering assessment to assess the security awareness and physical security controls of the organization.
- Ability to independently research for new vulnerabilities in systems and software and modify and customize tools, known exploits, POCs and scripts to meet operational requirement.
- Research and stay up-to-date with the latest attack techniques, tools, and emerging threats.
- Present technical reports to clients, explaining the outcomes of the testing and providing detailed insights and recommendations.
- Collaborate effectively with cross-functional teams, including developers, IT operations, and business stakeholders to integrate security best practices seamlessly into project workflows.
- Provide mentorship and guidance to junior security staff and foster a culture of proactive security awareness within the organization.

This role is for you if you have the below

• We are seeking an experienced and highly skilled Consultant with over 5+





years of working experience in the field of cybersecurity, including network penetration testing, vulnerability assessment, Active directory testing, phishing assessment and web application penetration testing. The ideal candidate will possess a solid working knowledge of Network protocols, performing OSINT to identify publicly available information and testing and exploiting Microsoft services like Windows Servers, Active directory, Certificate Services.

Mandatory technical & functional skills

JOB DESCRIPTIONS

- Perform manual application penetration tests on one or more of the following to discover and exploit vulnerabilities: web applications, internal applications, APIs,

internal and external networks, and mobile applications

- 5+ years of professional experience in cybersecurity, with a focus on Network penetration testing and Red teaming.
- Strong understanding of Network protocols, web applications, cryptography,

various operating systems and security technologies.

- Strong understanding of exploitation of Microsoft platform used in enterprise environment such as windows Servers, Active Directory Certificate Service,

Azure, etc.

- Experience in one or more of the following a plus: Web application penetration testing, mobile application penetration testing application architecture and business logic analysis.
- Relevant certifications, such as GWAPT, OSCP, OSEP, CRTP, CRTO,

OSWA, are strongly preferred.

📌 Penetration Tester / Web and Network PT Consultant (Gurugram)
🏢 Kezan consulting
📍 Gurugram